The OS has to support patch management. If it's being used...

The OS has to support patch management. If it's being used more than you thought, then you built it better than you thought. You just have to have patch management built into the OS.